1
0
mirror of https://github.com/fwbuilder/fwbuilder synced 2026-05-02 07:07:32 +02:00

36 Commits

Author SHA1 Message Date
Vadim Kurland
444dfb5bb2 2009-05-14 vadim <vadim@vk.crocodile.org>
* PolicyCompiler_pf.cpp (fillDirection::processNext): fixed bug
#2791950 "no way to generate "pass out" rule with no interface".
Compiler created two rules "pass out" and "pass in" for rules with
no interface and direction "in" or "out". It should create one
rule with direction defined by the rule in the GUI.
2009-05-14 21:54:42 +00:00
Vadim Kurland
896fbc723a pf example for ssh access to fw. per email support request 2009-04-09 23:05:27 +00:00
Vadim Kurland
c18f9a88da 2009-03-24 vadim <vadim@vk.crocodile.org>
* DialogData.cpp (DialogData::loadToWidget): fixed bug #2710309:
"Bug in gui/DialogData.cpp when not using mapping.". There was a
bug in DialogData.cpp that when setting the value of a combobox
and not using a mapping array the requested value would not be
selected. Applied patch provided by Tom Judge ( tomjudge )

* platforms.cpp (init_platforms): fixed bug #2710300 "Bug in
gui/platforms.cpp". there was a discrepancy between the list of
route-to options for PF and UI elements.
2009-03-25 04:43:16 +00:00
Vadim Kurland
f6d1b5b38d 2009-03-24 vadim <vadim@vk.crocodile.org>
* PolicyCompiler_pf_writers.cpp (PrintRule::_printAction): Added
support for anchor names with "/*" suffix for PF. Now the user can
create policy ruleset with name e.g. "ftp-proxy/*" and then set up
branching rule pointing to this ruleset. This ruleset is treated
by the program in a special way. First, it allows characters "/"
and "*" in the name of the ruleset (but only for PF firewalls).
Second, compiler does not create a .conf file with rules from this
ruleset, assuming that it will be controlled by external program
such as ftp-proxy. See man page ftp-proxy(8) for examples.
2009-03-24 07:31:48 +00:00
Vadim Kurland
932b4d2d34 2009-03-23 vadim <vadim@vk.crocodile.org>
* pf.cpp (main): fixed bug (no #): compiler for pf added code
provided in the "prolog" section while option was set to "add
after table definitions" in the incorrect place.
2009-03-24 04:42:54 +00:00
Vadim Kurland
58f4b70da1 2009-03-11 vadim <vadim@vk.crocodile.org>
* RuleSetView.cpp (RuleSetView::createGroup): fixed bug (no #): if
user selected some rules that belonged to a group and few other
rules that did not belong to any group at the same time and used
context menu to place all these rules in a new group, the GUI used
to crash.

;
2009-03-12 04:50:00 +00:00
Vadim Kurland
53844b8060 checking for "proto ..." in the custom service code string before printing protocol in policy and nat compilers for pf" 2008-12-28 12:17:26 +00:00
Vadim Kurland
a720640ffe bugs 1111267, 2463048 2008-12-28 07:12:12 +00:00
Vadim Kurland
b62891ba69 * SSHSession.cpp (SSHSession::heartBeat): built-in installer
periodically "pings" the other end to keep ssh session alive. This
helps recreate state in the firewall state table if it is cleared
when rules are reloaded, which in turn prevents installer from
hanging.
2008-12-22 05:10:11 +00:00
Vadim Kurland
742f0b6791 test for compined ruleset for pf 2008-12-16 05:18:21 +00:00
Vadim Kurland
4cb259c543 2008-12-08 Vadim Kurland <vadim@vk.crocodile.org>
* RuleSetView.cpp (RuleSetView::contextMenu): fixed bug #2407141
"label markers". Color label text set in Preferences was not used
in the contet menus where user can actually apply those colors to
rules.
2008-12-09 03:40:40 +00:00
Vadim Kurland
0cbf11fa16 2008-11-17 Vadim Kurland <vadim@vk.crocodile.org>
* ObjectManipulator.cpp (ObjectManipulator::duplicateObject): fix
bug #2303486: "Operation of duplicating firewall should switch
policy". When firewall object is duplicated, the GUI should
automatically open policy of the new object rather than keep
policy of the original open. At the same time, reset lastModified,
lastCompiled, lastInstalled of the new firewall instead of keeping
copies from the original.

* instDialog.cpp (instDialog::testFirewall): Check to make sure
paths to ssh and scp utilities are properly configured in
Preferences before running install. Show aprropriate error dialog
to the user if path to ssh or scp is not configured.
2008-11-17 16:45:14 +00:00
Vadim Kurland
483dab7051 * Compiler.cpp (Compiler::_expand_addr_recursive): change in the
algorithm used to decide which interfaces of the host or firewall
object to use in a rule when this host or firewall object is found
in source or destination.
2008-10-21 02:49:41 +00:00
Vadim Kurland
7c3fdae4f5 main window and dialogs do not enforce font 2008-08-30 05:05:56 +00:00
Vadim Kurland
61601fe1e3 bug 2056510 "Compile time" address tables objects dont work 2008-08-18 01:47:56 +00:00
Vadim Kurland
3304512740 2055984 ] Negate Objects not work 2008-08-18 01:28:00 +00:00
Vadim Kurland
46d9e07645 controls to turn ipv6 forwarding on/off for linux,openbsd and freebsd 2008-07-18 22:56:50 +00:00
Vadim Kurland
65b82d973a one more nat rule for pf 2008-07-07 05:15:25 +00:00
Vadim Kurland
75d30ae964 added -xt option to fwb_iosacl 2008-07-07 04:36:10 +00:00
Vadim Kurland
25e6e7de73 test file 2008-07-06 02:45:35 +00:00
Vadim Kurland
ce2508e93a support for tos matching for PF 2008-07-06 02:02:26 +00:00
Vadim Kurland
47a435f7d3 support for userService in compiler for pf 2008-06-07 03:09:38 +00:00
Vadim Kurland
ece0df1e07 compilers for iptables and pf find branch rulesets even if they belong to a different fw 2008-06-05 20:41:25 +00:00
Vadim Kurland
2e2135bcbf updated test cases; testing xslt transformations that add TagService objects 2008-06-04 22:46:06 +00:00
Vadim Kurland
a2049a8c31 ipv6 in fwb_pf 2008-05-31 22:32:34 +00:00
Vadim Kurland
0457709b97 support for multiple rule sets in PF 2008-05-30 22:00:45 +00:00
Vadim Kurland
d36c466b8c can insert NetworkIPv6 into "Network" system group 2008-05-30 02:51:31 +00:00
Vadim Kurland
5ef33f87e4 compiler for pf works with getAddressPtr() 2008-05-19 04:25:42 +00:00
Vadim Kurland
9817848911 fixed bug 1961202 (porting from 2.1.19) 2008-05-10 20:46:44 +00:00
Vadim Kurland
ff2b36d329 porting bugfixes from 2.1.19 2008-05-06 04:11:33 +00:00
Vadim Kurland
c52a266bb0 merging -r102:HEAD from branch rule-element-action 2008-05-03 03:46:18 +00:00
Vadim Kurland
58355d5aab ********************************
Merge branch inet-addr-changes r61
********************************
2008-04-13 07:06:30 +00:00
Vadim Kurland
85e722d574 sync with 2.1.17 2008-02-13 04:19:45 +00:00
Vadim Kurland
8be475b4ac forward-porting patches from 2.1.17 2008-02-07 05:57:41 +00:00
Vadim Kurland
03b25ab430 synchronized with 2.1.16 on tag sync-12-14 2007-12-28 08:31:28 +00:00
Vadim Kurland
fcfedad398 Initial import into v3 branch 2007-12-25 22:25:59 +00:00